Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/MOTEv7v1GRWNICnIavkhIKvzRCo.roa
File: MOTEv7v1GRWNICnIavkhIKvzRCo.roa (raw, json)
Hash identifier: XSyDDVnu7qgYr2bxBueODUMkgPZU8GJnfLVAYNssWHI=
Subject key identifier: 30:E4:C4:BF:BB:F5:19:15:8D:20:29:C8:6A:F9:21:20:AB:F3:44:2A
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 08CC3A95
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/MOTEv7v1GRWNICnIavkhIKvzRCo.roa
Signing time: Mon 28 Feb 2022 07:09:00 +0000
ROA not before: Mon 28 Feb 2022 07:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208102
IP address blocks: 212.22.66.0/24 maxlen: 24
185.126.181.0/24 maxlen: 24
212.22.85.0/24 maxlen: 24
212.22.93.0/24 maxlen: 24
212.22.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147602069 (0x8cc3a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Feb 28 07:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30e4c4bfbbf519158d2029c86af92120abf3442a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:93:40:c3:0b:8a:73:31:54:15:7c:f5:63:
0e:5b:f0:c9:66:8e:74:79:f9:70:f0:34:23:5a:54:
6f:f2:bc:92:4e:1b:db:f6:c6:bc:34:40:1b:3a:f8:
4a:4f:15:65:59:9c:c4:fc:de:69:19:4a:88:25:3d:
23:b4:53:03:d5:5f:b9:9c:6b:c7:d9:26:7a:d1:7f:
81:75:cd:f7:3e:3b:a1:84:b9:e0:5c:a1:f6:06:ea:
44:6d:a9:3c:ba:64:1c:60:c5:66:31:4a:fe:a4:83:
e7:fc:f9:4e:2c:bc:ff:26:52:b8:44:a4:0a:fc:fc:
ee:2f:31:81:5e:b9:0b:86:1f:a7:c0:d4:e5:91:d8:
b2:97:f0:24:0f:ec:e0:99:f7:01:ca:ba:4f:d9:53:
10:cb:65:bc:89:e5:e0:ea:c8:c5:89:1f:3e:d3:28:
45:0f:29:55:b9:43:e7:6e:74:a6:a2:27:0f:ed:11:
97:ce:ea:c3:40:49:63:f6:f4:65:90:1c:45:7f:9c:
73:bf:0c:f0:a8:76:7d:c3:ad:81:ad:fa:b4:73:6d:
76:01:b9:7b:54:d3:a8:b6:65:e6:c8:01:56:b4:9d:
41:7c:ee:40:af:10:9b:f3:65:57:1b:1a:93:03:9b:
23:33:14:1a:ef:95:f5:4e:57:55:4e:7d:10:1a:5b:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E4:C4:BF:BB:F5:19:15:8D:20:29:C8:6A:F9:21:20:AB:F3:44:2A
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/MOTEv7v1GRWNICnIavkhIKvzRCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
212.22.66.0/24
212.22.85.0/24
212.22.92.0/23
Signature Algorithm: sha256WithRSAEncryption
94:79:49:0f:1a:4d:5e:1e:f3:09:ce:83:0b:4c:06:3b:f4:4f:
15:3f:9d:b6:db:82:73:5c:c3:c4:ce:0e:7d:43:a0:10:c2:1c:
d2:a1:9c:13:2f:1f:05:6b:ff:6e:50:44:db:f3:6d:c8:4d:be:
77:96:41:7a:94:e3:f4:b9:e5:78:80:97:e3:53:5a:e3:37:1f:
f4:95:bd:1a:c6:54:ba:04:e9:ef:7c:b1:1f:db:93:d2:b7:ea:
53:e6:89:84:2f:64:56:5b:6d:01:8f:53:12:be:f4:7d:a5:55:
19:5c:fe:65:d0:87:41:9f:3b:e3:5c:92:67:ed:39:14:b9:59:
2f:1c:14:3d:bd:f3:4a:47:01:7e:6d:5c:26:18:c4:69:11:04:
69:3b:1d:cb:a2:2d:f6:a1:8b:72:ce:3b:f4:65:84:0a:c9:4f:
75:fe:36:85:22:43:b1:2d:9f:90:39:e0:cc:f2:67:d5:d2:9d:
2a:b2:e5:c5:9e:81:1a:7e:9d:1d:f3:84:cf:45:66:2f:ec:23:
27:81:c0:ad:8b:a1:1b:de:70:0a:6f:80:42:6e:37:43:26:ce:
75:2e:b6:82:8c:b8:e4:bf:5f:b1:ab:59:b9:d3:56:42:e3:69:
f2:64:c2:ce:7e:e4:14:53:78:93:65:93:f2:fd:ef:15:e3:16:
a6:a9:1c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org